1 Topic by r.luthiger

  • r.luthiger
  • Member
  • Offline
  • Registered: 2014-07-08
  • Posts: 17

Topic: SOGO Password recovery is blocking login

I updated SOGO from 5.6 to 5.8 and now it is not possible anymore to log in. In the sogo.log I have this message at the time of the login attempt:

Dec 10 01:09:15 sogod [3157]: "POST /SOGo/so/passwordRecoveryEnabled HTTP/1.0" 403 0/50 0.001 - - 0 - 14

In the webmaster tools of the browser I see in the console log that the 403 is not expected. Did anybody else have this problem?

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,082

Re: SOGO Password recovery is blocking login

I see you reported this to SOGo team, let's wait for their reply:
https://bugs.sogo.nu/view.php?id=5658

3 Reply by r.luthiger (edited by r.luthiger 2022-12-13 01:26:47)

  • r.luthiger
  • Member
  • Offline
  • Registered: 2014-07-08
  • Posts: 17

Re: SOGO Password recovery is blocking login

OK. I found now some more. It looks like the config provided by iRedMail is the problem.

In nginx I have this error message:
2022/12/12 18:07:21 [error] 1706#1706: *21865 upstream sent too big header while reading response header from upstream, client: 1.1.1.1, server: _, request: "POST /SOGo/connect HTTP/1.1", upstream: "hXXp://127.0.0.1:20000/SOGo/connect", host: "something.com", referrer: "hXXps://something.com/SOGo/login?language=English"

According to SOGo log it is sending a 200 status code. But the browser gets from the in-between nginx a 502 status code. And in the log is then the above mentioned error.

4 Reply by r.luthiger (edited by r.luthiger 2022-12-13 01:27:18)

  • r.luthiger
  • Member
  • Offline
  • Registered: 2014-07-08
  • Posts: 17

Re: SOGO Password recovery is blocking login

I found the solution now. I had to add the proxy_buffer config parameters. Sadly I can not post the URL to the solution here. I added the solution to the before mentioned bug report.

5 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,082

Re: SOGO Password recovery is blocking login

I added iRedMail upgrade tutorial link in the bug report. And here it is:
https://docs.iredmail.org/upgrade.iredm … go-webmail